Australia's eSafety Watchdog Flags Major Child Protection Failures Across Steam, Roblox, Fortnite and Minecraft

Australia's online safety regulator has delivered a blunt assessment of the gaming industry's efforts to shield young players from harm, concluding that four of the world's most popular gaming platforms have "significant gaps" in their child protection systems. The findings, published by the eSafety Commission, highlight inconsistent and in some cases inadequate safeguards across Steam, Roblox, Fortnite and Minecraft — services used daily by millions of children worldwide.

The report arrives amid growing concern about the risks minors face in online gaming environments, where interactions with strangers can quickly escalate into grooming, exploitation or exposure to extremist material. Research cited by the regulator found that nine out of ten Australian children between the ages of eight and 17 have played online games, underscoring just how central these platforms have become to childhood in the digital age.

eSafety Commissioner Julie Inman Grant framed the issue as a matter of basic rights, arguing that children should be able to enjoy online gaming without being exposed to predators, sexual extortionists or violent extremist content. She warned that weak safety measures create openings for predatory adults to contact children and build relationships before attempting to groom them — whether for sexual exploitation or radicalisation.

One of the most pointed findings concerned Valve, the United States gaming giant behind Steam and Steam Chat. According to the report, Valve was the only provider among those examined that did not deploy a type of detection technology widely adopted across the industry to identify and remove known harmful content. The regulator also found that Valve did not proactively use tools to detect child sexual exploitation material or violent content within chats, with existing systems largely limited to flagging scams.

Roblox was singled out alongside Valve for relying solely on internal datasets to train its language detection systems, and for failing to retrain those models regularly. The report suggests that without periodic updates and broader training data, automated moderation tools may struggle to keep pace with evolving tactics used by bad actors. Inman Grant said the commission expects all these services to "lift their game" in identifying and combating serious harms, including child sexual exploitation, sexual extortion, and material that promotes or instructs violence.

Age verification emerged as another weak point. Minecraft and Fortnite — the latter of which does offer dedicated child accounts — generally allow users to self-declare their age, according to the report. That means anyone willing to claim they are an adult can unlock "higher-risk communication features," potentially exposing younger users to unmoderated contact. Steam similarly relies on self-declared ages, though the report acknowledged that the platform has recently introduced age checks using credit cards. Roblox was credited with strengthening its age verification measures since last December.

The regulator also criticised the uneven way the four platforms share information and participate in industry-wide initiatives. Mojang Studios, the developer of Minecraft, and Roblox both contribute industry expertise on combating child sexual exploitation and violent extremism online, but Valve does not, the report found. Separately, Fortnite maker Epic Games failed to share instances of breaches with other platforms under a global programme designed to combat online child sexual exploitation and abuse — a gap that could leave other services unaware of emerging threats.

The findings were based on information the eSafety Commission gathered between October 2025 and March 2026, examining how each platform protects users from serious online harm. The report does not allege specific incidents of abuse on any platform, but rather assesses the robustness of the systems designed to prevent them. Valve, Epic Games, Roblox and Microsoft — which owns Minecraft — have all been contacted for comment.

Australia has positioned itself at the forefront of global efforts to regulate children's online experiences. Last December, the country introduced a world-leading ban on social media access for under-16s, a move that drew international attention but notably excluded gaming platforms. More recently, the government has pushed to force tech giants to give users the ability to opt out of social media algorithms, further signalling its willingness to legislate where it sees gaps in industry self-regulation.

The exclusion of gaming platforms from the social media ban has itself become a point of contention. Critics argue that online games can be just as addictive and potentially harmful as social media feeds, and that leaving them out of the under-16 restrictions creates an inconsistent safety framework. The eSafety report's findings may add weight to those arguments, particularly given the scale of children's engagement with titles like Fortnite, Minecraft and Roblox.

For parents and policymakers, the report raises uncomfortable questions about how much responsibility platforms should bear — and how effectively they are discharging it. Detection technology, age assurance, content moderation and cross-industry information sharing are all areas where the regulator has identified room for improvement. The commission's language suggests it views current arrangements as inadequate rather than merely imperfect, and that further regulatory intervention may follow if platforms do not respond.

The global dimension of the issue is significant. Steam, Roblox, Fortnite and Minecraft are not Australian products; they are international services with user bases spanning continents. Australia's findings therefore carry implications beyond its borders, potentially informing how other regulators approach similar questions. The eSafety Commission has previously demonstrated a willingness to push for change on the world stage, and its assessment of these four platforms is likely to be watched closely by authorities in Europe, the United Kingdom and North America.

Industry observers note that gaming platforms face a difficult balancing act. Overly restrictive measures can alienate users and stifle the social features that make games appealing, while lax protections leave children vulnerable. The report's emphasis on proactive detection, regular model retraining and consistent information sharing suggests the regulator favours a more systematic approach rather than piecemeal fixes.

Whether the platforms will act voluntarily remains to be seen. The commission's report stops short of announcing penalties, but its tone indicates that continued inaction could carry consequences. For now, the ball is in the industry's court — and the regulator has made clear it expects meaningful changes rather than promises.